Glossary: Logs and Data Sources for Investigations

Kerberos

The main sign-in protocol used in Windows domain networks. A domain controller records its credential checks as events 4768 and 4771.